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Amendments To The Claims 

This listing of claims will replace all prior 
versions, and listings, of claims in the application: 

Listing of Claims ; 

Claims 1-7. (Canceled) 

8. (Previously Presented) A method according to 
claim 43, wherein running the symbolic model checker to test 
the behavioral model of the SUT comprises: 

evaluating the respective results so as to determine 
the truth or falsity of the rules; and 

generating a list of uncoverable elements responsive 
to the respective results. 

Claims 9-42. (Cancelled) 

43. (Currently Amended) A method for coverability 
analysis on software under test (SUT) , execution of the SUT 
generating an outcome, the method comprising: 

generating rules regarding behavior of the SUT 
corresponding respectively to coverability tasks for the SUT; 

performing a run of a symbolic model checker to test 
a behavioral model of the SUT, so as to identify uncoverable 
elements in the SUT and to produce respective results for the 
rules ; 
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computing a coverability metric for the SUT as a 
function of the results; 

in response to the coverability metric, identifying 
a set of the uncoverable elements, such that removal of the 
set from the SUT is expected to have no effect on the outcome 
generated by execution of the SUT; and 

performing coverage analysis on the SUT while 
excluding the set of uncoverable elements from the SUT_^_ 

wherein the set of uncoverable elements comprises 
elements having an unused enumerated value . 

44. (Previously Presented) The method according 
claim 43, wherein generating the rules comprises generating a 
number of rules less than, by a factor in a range from two to 
ten, a number of basic blocks in the SUT, and wherein the 
number of rules is a function of a control -flow structure of 
the SUT. 

45. (Previously Presented) The method according to 
claim 43, wherein the set of uncoverable elements comprises 
dead code . 

46. (Previously Presented) The method according to 
claim 45, wherein the dead code is configured to implement a 
future modification of the SUT. 

47. (Previously Presented) The method according to 
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claim 43, wherein the set of uncoverable elements comprises 
atomic sub- formulae which cannot evaluate to one of true and 
false . 

48. (Previously Presented) The method according to 
claim 43, wherein the set of uncoverable elements comprises 
elements having an incorrect variable definition. 

Claim 49. (Cancelled) 

50. (Currently Amended) Apparatus for performing 
coverability analysis, comprising: 

a system memory, which is arranged to contain 
software under test (SUT) , execution of the SUT generating an 
outcome; and 

a computer system processor which is configured to 
access the memory so as to: 

generate rules regarding behavior of the SUT 
corresponding respectively to coverability tasks for the SUT, 

perform a run of a symbolic model checker to test a 
behavioral model of the SUT, so as to identify uncoverable 
elements in the SUT and to produce respective results for the 
rules, 

compute a coverability metric for the SUT as a 
function of the results, 
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in response to the coverability metric, identify a 
set of the uncoverable elements, such that removal of the set 
from the SUT is expected to have no effect on the outcome 
generated by execution of the SUT, and 

perform coverage analysis on the SUT while excluding 
the set of uncoverable elements from the SUT^ 

wherein the set of uncoverable elements comprises 
elements having an unused enumerated value . 

51. (Previously Presented) The apparatus according 
claim 50, wherein generating the rules comprises generating a 
number of rules less than, by a factor in a range from two to 
ten, a number of basic blocks in the SUT, and wherein the 
number of rules is a function of a control -flow structure of 
the SUT. 

52. (Previously Presented) The apparatus according 
to claim 50, wherein the set of uncoverable elements comprises 
dead code . 

53. (Previously Presented) The apparatus according 
to claim 52, wherein the dead code is configured to implement 
a future modification of the SUT. 

54. (Previously Presented) The apparatus according 
to claim 50, wherein the set of uncoverable elements comprises 
atomic sub- formulae which cannot evaluate to one of true and 
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false . 

55. (Previously Presented) The apparatus according 
to claim 50, wherein the set of uncoverable elements comprises 
elements having an incorrect variable definition. 

Claim 56. (Cancelled) 

57. (Previously Presented) The apparatus according 
to claim 50, wherein running the symbolic model checker to 
test the behavioral model of the SUT comprises: 

evaluating the respective results so as to determine 
the truth or falsity of the rules; and 

generating a list of uncoverable elements responsive 
to the respective results. 

58. (Currently Amended) A computer software product 
for performing coverability analysis on software under test 
(SUT) , execution of the SUT generating an outcome, the product 
comprising a computer-readable medium having computer program 
instructions recorded therein, which instructions, when read 
by a computer, cause the computer to: 

generate rules regarding behavior of the SUT 
corresponding respectively to coverability tasks for the SUT; 

perform a run of a symbolic model checker to test a 
behavioral model of the SUT, so as to identify uncoverable 
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elements in the SUT and to produce respective results for the 
rules; 

compute a coverability metric for the SUT as a 
function of the results ; 

in response to the coverability metric, identify a 
set of the uncoverable elements, such that removal of the set 
from the SUT is expected to have no effect on the outcome 
generated by execution of the SUT; and 

perform coverage analysis on the SUT while excluding 
the set of uncoverable elements from the SUT_^ 

wherein the set of uncoverable elements comprises 
elements having an unused enumerated value . 

59. (Previously Presented) The product according 
claim 58, wherein generating the rules comprises generating a 
number of rules less than, by a factor in a range from two to 
ten, a number of basic blocks in the SUT, and wherein the 
number of rules is a function of a control -flow structure of 
the SUT. 

60. (Previously Presented) The product according to 
claim 58, wherein the set of uncoverable elements comprises 
dead code . 

61. (Previously Presented) The product according to 
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claim 60, wherein the dead code is configured to implement a 
future modification of the SUT. 

62. (Previously Presented) The product according to 
claim 58, wherein the set of uncoverable elements comprises 
atomic sub- formulae which cannot evaluate to one of true and 
false . 

63. (Previously Presented) The product according to 
claim 58, wherein the set of uncoverable elements comprises 
elements having an incorrect variable definition. 

Claim 64. (Cancelled) 

65. (Previously Presented) The product according to 
claim 58, wherein running the symbolic model checker to test 
the behavioral model of the SUT comprises: 

evaluating the respective results so as to determine 
the truth or falsity of the rules; and 

generating a list of uncoverable elements responsive 
to the respective results . 
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